Privacy Policy

Last updated 31 August 2026 · BarnPilot™

This policy describes what BarnPilot collects, why we collect it, who else sees it, and how you get it back or get rid of it. It is written to be read, not to be survived.

Who we are

BarnPilot™ is owned and operated by Fast Aperture Enterprises LLC under the direction of its Chief Executive Officer, Scott Morvay. Fast Aperture Enterprises LLC is the business responsible for decisions about how BarnPilot handles personal information.

For anything in this policy, including a request to access, correct, export or delete your data, write to team@barnpilot.ai.

What we collect

Your account

Your name and email address. If you use Sign in with Apple we receive the identifier Apple gives us and the email you chose to share, which may be one of Apple's private relay addresses. If you set a password we store only a hashed version, never the password itself. Optionally a profile photo.

We also store your timezone, country, currency and language, because an evening reminder that arrives at 11pm is worse than useless, and a horse priced in euros is not priced in dollars.

Your horses and your barn

Everything you choose to put in: names, breeding, dates, photos and videos, notes, ride journals, schedules, shows, nutrition, medications, vaccinations, vet records and X-rays, movement videos, veterinarian feedback, whether a horse is clipped, where he spends his day, and any rest you record. If you enter it, we hold it. If you do not, we do not have it.

Places

The barns, venues and stops you add. When you type an address we send that text to a geocoding service to turn it into coordinates and a timezone, so we can fetch weather for the spot the horse is actually standing in.

Tracked rides and Navigator

BarnPilot does not monitor your phone's location during ordinary app use. If you choose Start Tracked Ride, BarnPilot collects precise location points while that ride is active so it can draw the route and calculate distance, duration, and speed. Collection can continue while BarnPilot is in the background or the phone is locked. It stops when you pause or finish the ride, or if location permission is withdrawn.

The route, ride metrics, notes, and any photos you add are linked to your account and the horse you selected. A ride photo may include the precise location and time at which you added it so BarnPilot can place it on the route map. New tracked rides are private by default. BarnPilot keeps a protected, account-scoped device copy while a ride is active or waiting to sync, then sends the completed private route and ride data to BarnPilot's Google Cloud services. The protected device copy is removed after the server save is confirmed.

If you actively use Navigator, BarnPilot uses your precise live position to show where you are, provide available route guidance, and determine progress toward a selected destination. Location collection can continue while active navigation is in the background or the phone is locked, and stops when active navigation ends or permission is withdrawn.

Optional Navigator contributions

Navigator lets you separately choose whether to contribute a mapped path, confirm a route, report a route problem, or contribute eligible Trail and Hack ride geometry for review. A contribution may include route coordinates, timestamps, GPS accuracy, travel mode, selected route segments, and a note you provide. It is stored with your account identifier for review, security, and duplicate prevention. A published map update does not display your name, horse, barn, ride notes, ride photos, or health data. This contribution is optional and is not enabled merely because you record a ride.

Your device

A push notification token, so an alert can reach your phone. Your iOS or Android version, app version, device model, and ordinary request information may appear in server logs alongside requests. On Android, Google services may also process the device and app identifiers needed to deliver notifications, provide maps and location components, and verify Google Play purchases.

BarnPilot asks for device permissions only when a feature needs them. Depending on what you choose to use, that can include camera or photo access for images and scanning, microphone access for Translator and Arion voice conversations, precise and background location for an active tracked ride or Navigator session, notifications for alerts, calendar access to add BarnPilot schedule items to a calendar you select, optional Contacts access on iPhone so Ari can match a recipient name for a communication you request, and Bluetooth or nearby device access during supported camera setup. Android permission choices can be changed in Android Settings; iPhone permission choices can be changed in iPhone Settings. BarnPilot does not import your phone calendar into your account.

Ari communication drafts and optional Contacts access

If you ask Ari to prepare a text message, email, or WhatsApp message for a person you name, your request or voice transcript, including the recipient name you said or typed, may be sent to Google Gemini under the AI permission described below so Ari can prepare the requested draft. Ari shows the recipient, channel, subject when applicable, and message for your review before a communication app is opened.

On iPhone, BarnPilot asks for Contacts permission only when it needs to match the name in an approved Ari action to an email address or phone number. On supported iPhone versions, you may allow access to all contacts or limit BarnPilot to contacts you select. You may deny access or change the permitted contacts later in Settings → Privacy & Security → Contacts → BarnPilot. Denying Contacts access does not prevent ordinary BarnPilot use, but Ari cannot address a draft by contact name unless BarnPilot can access a unique matching contact with the needed email address or phone number.

Contact matching happens on the device for the requested action. BarnPilot does not upload your address book, the matched email address, or the matched phone number to BarnPilot's servers or Google Gemini as part of the contact lookup, and BarnPilot does not use Contacts for advertising or to build a social graph. If there is no unique usable match, BarnPilot does not open an addressed composer.

After you approve, BarnPilot opens the appropriate system or third-party composer with the recipient and draft filled in. You can review, change, cancel, or press Send there. Ari and BarnPilot do not send the message automatically or in the background and do not claim that a message was delivered. Apple Messages, Apple Mail, WhatsApp, or another communication service you choose then processes the addressed draft under that service's privacy terms.

Optional Sentinel text alerts

If you separately choose to receive Sentinel alerts by text message, BarnPilot collects the mobile number you enter, its verification status, the time and version of your consent, your opt-out status, and message delivery events. Starting a Sentinel session does not enroll you in text messages. Text-message consent is optional and is not a condition of purchasing or using BarnPilot.

Sentinel texts are transactional alerts for a user-selected 24-hour Sentinel monitoring session. Message frequency varies according to the visible matches generated during that session. Message and data rates may apply. Reply STOP to opt out or HELP for help. BarnPilot does not send marketing or promotional text messages through this program.

BarnPilot does not sell or share mobile numbers or text-message opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. We disclose this information only to service providers needed to verify the number and deliver the messages you requested, when required by law, or when necessary to protect BarnPilot and its users.

Support messages

If you use the website form to report a problem or request a feature, we collect your email address, the message and subject, any name or device details you choose to provide, and ordinary security information such as the request's IP address. The message is delivered directly to Scott Morvay so he can reply, investigate the issue, protect the form from abuse, and improve BarnPilot.

Subscriptions

If you buy a subscription on iPhone or iPad, Apple handles the payment. If you buy one in the Android app, Google Play handles the payment. We never see your complete card number. We receive and store the store receipt, purchase token, product, transaction status, and account binding needed to verify what you bought and keep the correct BarnPilot access on your account.

How we use it

We use personal information only to:

• create and secure your account, sync your records, and provide the features you choose;
• store and show you your horses, barns, schedules, documents, photos and videos;
• record a tracked ride, calculate its metrics, place ride photos on its map, or provide active Navigator functions when you ask us to;
• run an AI, translation, Soundness Scan, or lookup feature when you ask us to;
• prepare a communication you request and match its named recipient on your device after you approve the draft;
• deliver requested alerts, transactional emails and subscription access;
• provide weather and timezone information for places you enter;
• answer support requests, prevent abuse, and keep BarnPilot reliable and secure; and
• meet legal, tax, accounting or safety obligations.

We do not use your data for advertising, cross-app tracking or data brokerage.

Who else sees it

BarnPilot does not have employees or contractors reviewing user content. A small number of service providers process limited information by computer so the app can work. They receive only what is needed for the service named below, and we require them to protect it and not use it for advertising on our behalf.

We do not sell your personal information, and we do not share it for advertising. There is no advertising SDK and no analytics tracker in the app.

People you choose. If you use the iPhone or Android system share sheet to send a task list, schedule, document or other content, the people and app you select will receive that content. If you approve an Ari communication draft, the selected messaging or email service receives the addressed draft when its composer opens. BarnPilot does not send it in the background. Apple or Google, together with the selected messaging, email, WhatsApp, or file-sharing service, then handles the shared copy or message under its own privacy terms.

Clearly labeled Amazon affiliate links. BarnPilot may show an optional “Buy on Amazon” link for supported camera hardware. The link is labeled in the app and contains an Amazon Associates referral tag. As an Amazon Associate, BarnPilot may earn a commission from qualifying purchases, at no additional cost to you. Opening the link leaves BarnPilot for Amazon's website or app. Amazon handles your browsing, account, order, and payment information under Amazon's own terms. BarnPilot does not receive your Amazon password or payment details. These links do not add an advertising SDK or analytics tracker to BarnPilot, and BarnPilot does not sell your personal information for advertising.

Legal and safety disclosures. We may disclose the minimum necessary information if required by a valid legal process, or when reasonably necessary to protect a person, an animal, BarnPilot, or the security of the service. We do not make voluntary disclosures for advertising or data-broker purposes.

What the AI does with what you upload

Before BarnPilot sends content to an AI provider for the first time, the app identifies Google Gemini, OpenAI, and Anthropic, describes the types of information that may be sent and why, and asks for your permission. If you choose “Not Now,” nothing is sent. You can withdraw permission at any time under Settings → AI Data Sharing.

When you use Arion’s voice conversation, BarnPilot streams microphone audio to OpenAI and may send the resulting transcript, your typed request, and only the relevant horse, barn, schedule, image, or other context needed to answer or carry out the request. An image is included only when you intentionally capture or select one. OpenAI returns the voice or text response and any proposed action for your review.

BarnPilot does not use this content to train AI models and does not opt in to provider model training. OpenAI states that API data is not used to train its models unless the API customer explicitly opts in. OpenAI may retain API abuse-monitoring logs containing customer content for up to 30 days, unless longer retention is required by law or necessary to protect its services or others. The Realtime API does not retain separate application state after the request.

Watcher camera images and Anthropic Claude

When you choose to enable Watcher for a camera, BarnPilot clearly identifies Anthropic’s Claude API as the third-party AI service that will process images from that camera and asks for your permission before processing begins. If you do not allow it, BarnPilot will not send that camera’s images to Anthropic and Watcher AI monitoring will remain off.

While Watcher is enabled, BarnPilot may send a motion-triggered still image, the assigned horse’s name, and limited Watcher instructions to Anthropic so Claude can describe the visible scene and determine whether it matches the notification rules you selected. Watcher evaluates only what is visible in the still image. It does not identify a person, diagnose a horse, determine intent, or replace direct supervision, veterinary care, or emergency services.

BarnPilot deletes a non-alert image after classification. If an image produces a saved Watcher alert, BarnPilot retains that alert image for seven days so you can review the notification, after which BarnPilot deletes it under the Watcher retention process.

Anthropic states that inputs and outputs sent through its commercial API are automatically deleted from its backend within 30 days, unless different retention terms apply, longer retention is needed to enforce its Usage Policy, or retention is required by law. Anthropic also states that commercial API inputs and outputs are not used to train its models by default.

Watcher permission is specific to each camera. You may withdraw it at any time by turning Watcher off for that camera. Withdrawing permission stops future images from being sent to Anthropic. Images already saved as Watcher alerts remain subject to the seven-day BarnPilot retention period described above.

Veterinarian feedback and product improvement

After a Soundness Scan, you may choose to record what your veterinarian found. That feedback remains part of your account record. BarnPilot does not silently use it to train or improve a model. It may be considered for controlled product improvement only when the required rights, verification, and separate current consent are present. Declining that optional use does not prevent you from using Soundness Scan or keeping the feedback with your horse.

Trainer and horse lookups

BarnPilot can search public SafeSport and USEF records and show you what it found. This is a search of a public list. It is not a background check, it is not an endorsement, and a clean result is not a character reference. Confirm anything that matters directly with USEF or the U.S. Center for SafeSport. We do not add your searches to anyone's profile.

Where your data lives

Our servers and storage are hosted with Google Cloud in the United States. If you use BarnPilot from outside the United States, including the European Economic Area and the United Kingdom, your information is transferred to and processed in the United States.

How long we keep it

We keep account content while your account exists so the app can show it back to you. This includes saved rides and routes, ride photos, Soundness Scan records, movement videos, and Navigator contributions you choose to submit. A protected device copy of an active tracked ride is removed after the server save is confirmed. When you delete a saved ride or other item that provides an in-app delete action, BarnPilot removes the active record and its associated stored uploads according to that feature's deletion process.

When you delete your account, we remove that account's active database records and stored uploads. The deletion is scoped to your account and does not delete another user's account or content. Residual copies may remain in routine encrypted backups until those backups are automatically overwritten. We may keep the minimum record required for legal, security, tax or accounting reasons, such as a record that a purchase occurred.

We keep support messages only as long as reasonably needed to reply, investigate and follow up on the issue, improve the service, prevent abuse, or meet a legal or security obligation.

Your rights

Wherever you live, you can ask us to show you what we hold, correct it, export it, or delete it. Write to team@barnpilot.ai and we will act on it. We will not make you jump through hoops and we will not charge you.

You can delete your account inside BarnPilot under Settings, or follow the steps on our account deletion page to ask us to do it. You can withdraw optional consent at any time: turn off notifications in iOS or Android Settings, withdraw location or photo access in your phone's Settings, stop active ride or Navigator location collection, turn off optional Navigator contribution, stop using an optional AI feature, or remove content you no longer want stored. Withdrawing consent does not affect processing that already lawfully occurred, and some features cannot work without the information they require.

If you are in the European Economic Area or the United Kingdom, our lawful bases are: performing our contract with you (running the app you asked for), our legitimate interests (keeping the service working and secure), and your consent where we ask for it, such as push notifications. You have the right to access, correct, erase, restrict, port, and object, and to complain to your local supervisory authority.

If you are in California, you have the right to know, delete, correct, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of, and we will not treat you differently for asking.

Children

BarnPilot is built for adults, including parents keeping track of a young rider's schedule. It is not directed at children under 13 and we do not knowingly collect their personal information. A parent's account is the parent's. If you believe a child has given us information, write to us and we will remove it.

Security

Traffic is encrypted in transit, data is encrypted at rest by our host, passwords are hashed, and records are restricted to the account that owns them plus the limited administrative access described above. No system is perfect, and anyone who tells you theirs is should worry you. If you find a security problem, please tell us at team@barnpilot.ai and we will treat it seriously and quickly.

Changes

If we change this policy we will update the date at the top, and if the change is significant we will tell you in the app rather than hoping you notice.